https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-5463.htmlhttps://patchthecve.com/cve/CVE-2007-5463.htmlTue, 16 Jun 2026 22:46:12 +0000MEDIUM 5.0: ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow remote attackers to obtain the pathname for certificate and key files via an "iDEAL transaction", possibly involving fopen error messages for nonexistent files, a different issue than CVE-2007-5364. NOTE: thttps://patchthecve.com/cve/CVE-2006-2979.htmlhttps://patchthecve.com/cve/CVE-2006-2979.htmlTue, 16 Jun 2026 22:26:09 +0000LOW 2.6: Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id parameter in forum.php, which is not properly handled in block_https://patchthecve.com/cve/CVE-2006-0532.htmlhttps://patchthecve.com/cve/CVE-2006-0532.htmlTue, 16 Jun 2026 22:20:47 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG SRC attribute.